Distinguish reports by commit SHA in addition to remote URL
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 210
- Forks
- 36
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 2
Description
Currently a report is output for each repository URL analyzed, even if it is analyzed twice on different commits.
Since repositories are to be identified with both a remote url, branch and commit SHA: https://github.com/oracle-samples/macaron/issues/33, this should be reflected in the reports.
https://github.com/oracle-samples/macaron/blob/main/src/macaron/slsa_analyzer/analyzer.py#L351
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in src/macaron/slsa_analyzer/analyzer.py around line 351 and review issue 33 for the repository identity requirements. Trace how analyzed repositories are keyed when reports are produced, then make the report distinction include the commit SHA as well as the remote URL. Done means separate reports are produced for the same URL analyzed at different commits.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100